Russia’s Star Blizzard Targets 100+ Orgs With Fake Invites
September 30, 2026
Microsoft says Russian state-backed group Star Blizzard used fake event invitations to install a Windows backdoor at more than 100
Threat Actors
Russia’s Star Blizzard Targets 100+ Orgs With Fake Invites
Microsoft says Russian state-backed group Star Blizzard used fake event invitations to install a Windows backdoor at more than 100 Ukraine-linked organizations.
Vietnamese National Charged in $16 Million Crypto Scam
A Vietnamese national was charged with money laundering after a pig-butchering scam defrauded a victim out of $16 million in cryptocurrency, prosecutors say.
Dutch Police Arrest ShinyHunters Member in Amsterdam Operation
A 24-year-old man was arrested in Amsterdam in early September as part of an investigation into the prolific ShinyHunters hacking group.
ShinyHunters Claims FBI Employee Data Breach in Dark Web Post
ShinyHunters claims breach of FBI employee and applicant data in dark web post on September 23, stating the attack is personal, not financially motivated.
Microsoft Seizes 50 EvilTokens Phishing Sites, UK Arrests 2
Microsoft announced court-authorized takedown of EvilTokens phishing service on September 22, seizing 50 sites. UK police arrested 2 suspects. 12,000 inboxes compromised.
SideCopy Expands India Targeting to Academic Institutions
SideCopy threat actor expanded targeting from Indian government to academic institutions using spear-phishing with ReverseRAT and mshta.exe abuse, per Trellix research.
Malicious npm Packages Bypass Install-Script Detection
npm attackers hide malware in runtime code execution instead of install scripts, evading traditional supply chain defenses targeting the indexed-btree package.
ShinyHunters Breaches Clop Ransomware Leak Site, Threatens Gang
ShinyHunters extortion gang compromised Clop's Tor leak site, claiming to have stolen server data and private keys, threatening to extort the ransomware gang.
Russian Actor Uses AI to Exploit PaperCut, Hits 440+ Organizations
Russian threat actor deployed hundreds of AI agents to exploit PaperCut vulnerabilities, compromising 395-440+ organizations between August 15 and September 8.
Four Nation-State Groups Deploy BlueMoon Kit Within 12 Days
APT31 and three additional nation-state actors deployed the BlueMoon exploit kit chaining Chrome and Windows zero-days within a two-week window, with researchers suspecting AI assistance.
Vietnamese National Charged in $16 Million Crypto Scam
September 30, 2026
A Vietnamese national was charged with money laundering after a pig-butchering scam defrauded a victim out of $16 million in
Dutch Police Arrest ShinyHunters Member in Amsterdam Operation
September 29, 2026
A 24-year-old man was arrested in Amsterdam in early September as part of an investigation into the prolific ShinyHunters hacking
ShinyHunters Claims FBI Employee Data Breach in Dark Web Post
September 23, 2026
ShinyHunters claims breach of FBI employee and applicant data in dark web post on September 23, stating the attack is
Microsoft Seizes 50 EvilTokens Phishing Sites, UK Arrests 2
September 23, 2026
Microsoft announced court-authorized takedown of EvilTokens phishing service on September 22, seizing 50 sites. UK police arrested 2 suspects. 12,000
SideCopy Expands India Targeting to Academic Institutions
September 23, 2026
SideCopy threat actor expanded targeting from Indian government to academic institutions using spear-phishing with ReverseRAT and mshta.exe abuse, per Trellix
Malicious npm Packages Bypass Install-Script Detection
September 21, 2026
npm attackers hide malware in runtime code execution instead of install scripts, evading traditional supply chain defenses targeting the indexed-btree
ShinyHunters Breaches Clop Ransomware Leak Site, Threatens Gang
September 21, 2026
ShinyHunters extortion gang compromised Clop’s Tor leak site, claiming to have stolen server data and private keys, threatening to extort
Russian Actor Uses AI to Exploit PaperCut, Hits 440+ Organizations
September 11, 2026
Russian threat actor deployed hundreds of AI agents to exploit PaperCut vulnerabilities, compromising 395-440+ organizations between August 15 and September
Four Nation-State Groups Deploy BlueMoon Kit Within 12 Days
September 11, 2026
APT31 and three additional nation-state actors deployed the BlueMoon exploit kit chaining Chrome and Windows zero-days within a two-week window,
Trending
Daily Briefing Newsletter
Subscribe to the Daily Security Review Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.